Hot answers tagged

10

Edited Answer (Re)improved on just about everybody else's improved answer (@elmart, @user26312,myself). Edits should not be needed in the script: #!/bin/bash default_line=$(netstat -rn |grep default) gateway=$(echo $default_line | awk '{print $2}') interface=$(echo $default_line | awk '{print $6}') echo $gateway echo $interface scutil <<EOF d.init ...


8

I've reworked @hbogert's solution into a more manageable single script: #!/bin/bash scutil <<EOF d.init get State:/Network/Service/forticlientsslvpn/IPv4 d.add InterfaceName ppp0 set State:/Network/Service/forticlientsslvpn/IPv4 EOF route delete default route delete -ifscope en0 default route add -ifscope en0 default 192.168.1.1 route add -net 0.0.0....


8

The number one way to increase the speed of the connection is to work with the internet service provider (ISP). If the physical link is 1 Mbps symmetrical with 100 ms latency to the server, you will not be able to accelerate that beyond 1 Mbps and 100 ms latency via software. You can add additional physical links to the connection increasing the overall ...


6

First off, check that your bottleneck is not the CPU required for encryption on your VPN. If your CPU is already maxed then no arrangement of spreading your traffic over multiple connections at the existing VPN server can help, though increasing the CPU resources available could. A major limitation on the speed of any TCP connection is from the combination ...


4

Short answer: disable comp-lzo. I realize this is an old post, but I was also suffering from poor OpenVPN performance. I had tried everything, adjusting the MTU, changing the snd and rcv buffers, mss clamping, you name it. CPU load was negligible. On a whim, I disabled compression (removed comp-lzo from the client and the server) and performance increased ...


4

I once did something like this for individually firewalling each user's connection. I have implemented it using the learn-address script in OpenVPN which is called when a user connects or disconnects. I have adapted it for your use case. The script looks as follows: #!/bin/bash statedir=/tmp/ function bwlimit-enable() { ip=$1 user=$2 # ...


4

I was able to use an older version of Forticlient and confirmed that it works! Here's the link to it on my dropbox: https://www.dropbox.com/s/p43ssvp0gusmzeq/forticlientsslvpn_macosx_4.0.2297.dmg?dl=0


4

If I don't have a physical location anymore, I would loose that IP address. Yes, but that doesn't mean you're out of luck. It would be relatively simple for you to configure a very similar setup to what you currently have, only in AWS. This is something I've done many, many times. Stand up a VPN server (OpenVPN on Linux is what I would recommend for ...


4

You are correct that with purely destination-based routing this is a problem, if the destinations you are reaching through the tunnel overlap with routing needed for tunnel establishment, etc.... The way I have usually seen this done, and done it myself on various routers, is to use policy routing : The router acting as a VPN endpoint keeps its default ...


4

Running things via VPN is essentially slower due to the additional network hops and encryption. If you must use a VPN, consider where the VPN is located (latency purposes) and the speed your getting from the connection.


4

There's no magic here. VPN is a complex ecosystem, with many different vendors, many different technologies, and many different configurations. There is no "VPN Master Software" or the like that will let you do what you want. About the closest configuration I can conceive of is to configure persistent site-to-site tunnels from each client location back to ...


3

Start your Hyper-V machine. Ensure the "Enhanced Session" is disabled/unchecked via the hyper-v top window menu (View -> Enhanced Session). Initiate and connect to your Cisco VPN client session. Once your Cisco session is connected, check to re-enable the "Enhanced Session" menu choice again. The enhanced cut-n-paste should work at this point. Note: After ...


3

Set up an openvpn server on your network, and let them vpn with that. It can work over tcp 443 as a default configuration. Then they can use ssh and everything else to get to your network over the vpn tunnel.


3

If an unreliable connection can cause database corruption, then the problem isn't the connection but that the software is poorly designed.


3

In order to route packets destined to specific ports via a different default gateway you need to mark those packets using iptables and then route them via a different route table. So, first create a new route table with default gateway your local gateway (not your VPN gateway) ip route add table 4 default via 192.168.0.1 Then mark the packets you need ...


3

Without more detail about what solutions you are using, it will be hard to answer your question precisely, but generically yes you can do that. Usually your VPN server and your SSH server point to some external authentication directory and communicate with it over Radius so you can use the same one for both. In most cases I've seen however, VPN ...


3

This warning is telling you that your configuration would result in an IP address space collision. The 192.168.1.0/24 subnet that you're trying to connect to remotely already exists locally. You can't have the same IP address space in two different places on your WAN, so you need to either change the remote subnet to something that doesn't exist locally, ...


3

By default Fortigate firewall's dedicated management interface has an IP address from 192.168.1.0/24 range. Please note, it is not the internal interface, it's another dedicated port for management, with default ip 192.168.1.99. You can connect to the firewall directly with this interface using an ip address 192.168.1.2 and subnet 255.255.255.0. I guess, ...


2

As they have explained you already, the issue is that the policy is enforced client-side but setup on the server-side. This is a security feature, which allows the connecting network to avoid clients "bridging" unsecure and secure networks together. The only way is to "hack" the client not to obey the server-side command. There is a tutorial you can find ...


2

Network-Connect is the Old Juniper VPN. It is no longer used/shipped by juniper, everything is now Pulse secure. The information on this site is old. Pulse Secure is not supported on Linux.


2

On Ubuntu 15.10: sudo apt-get install icedtea-7-plugin openjdk-7-jre:i386 sudo ln -s /usr/bin/update-alternatives /usr/sbin/ (this may already exist) sudo apt-get install libstdc++6:i386 lib32z1 lib32ncurses5 libxext6:i386 libxrender1:i386 libxtst6:i386 libxi6:i386 Then connect to your VPN as you would normally through the web interface. You'll need to ...


2

After going through the same ordeal myself I found at least one problem with the route-up script. iptables -t mangle -A PREROUTING ... should be: iptables -t mangle -A OUTPUT ... Read about why here: http://www.iptables.info/en/structure-of-iptables.html I didn't have to turn on IP forwarding.


2

Not useful for all scenarios, but one workaround is to run Virtualisation. Run your VPN on your host, and then run the traffic and wireshark capture on the Guest machine


2

I just solved this after an hour of fiddling with my Windows 10 settings, and I'm sharing it with you in case it's useful 1) Uninstall SonicWall. Both AppStore and classic apps can coexiste, I've uninstalled both. Reboot your PC 2) From SonicWall's support page, download the 'GVCUtil' cleanup utility. Run it, and remove all configuration files and perform ...


2

I'm not sure if you are using AWS, but please make sure that you disable destination/source checking on any AWS instance you may be using to run this. Right click on the instance, mouse over to Network, then there should be an option there. If this doesn't help you, hope it helps someone else.


2

Affinity Groups are no longer a thing. Regions are the grouping mechanism now. Make sure your VMs and VNet are in the same Azure Region (such as East US 2, in my case). I can successfully connect to my VPN (Point-to-Site) and RDP to my IaaS VMs, without any Endpoints exposed.


2

I found that you can just use the redirect option to your VPN server(e.g. 10.81.48.1 in VPN:PPTP confirguation)


2

You need to add route-nopull option (and remove redirect-gateway if it exists) to your OpenVPN client's configuration file on your VPS. That way connecting to a VPN server won't modify any routes on your VPS, so you would be able to set those you need by yourself.


2

I thought I'd provide a more generic Linux router scenario for users not using pfSense but a Linux based router (in my case DD-WRT). ip -6 route add xxxx:xxx:xxxx:xxxx::/64 via xxxx:xxx:xxxx:xx::x dev br0 The configured IPv6 prefix in RRAS IPv6 tab needs to be added after the add The IPv6 LAN IP address of the RRAS box is the via (essentially the gateway)...


2

For Sonicwall (either NSA-series or TZ-series firewalls using SSL-VPN, or SRA-series SSL-VPN appliances) you need to use NetExtender for Windows 8.0 or previous (or Mac OS X 10.8 or previous). Off hand, I know of no way to use the native VPN in Win 8.0 (or earlier) to connect to the SSL-VPN on Sonicwalls, only to the IPSEC/L2TP client VPN. For Windows 8.1, ...



Only top voted, non community-wiki answers of a minimum length are eligible